Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
File: bULP8YM0sv92sVrZRKipE16QVow.mft (raw, json)
Hash identifier: m/Nx9dOxXarAk4l3iTbpb0jadluPEYrCTiW0hJ/ag/A=
Subject key identifier: A4:85:00:82:8A:FD:BA:CE:7F:0E:D5:87:AB:BB:D5:05:D6:FF:F5:78
Authority key identifier: 6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
Certificate issuer: /CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Certificate serial: 0194BD4E39FCBDDB045AD5C4ED69EE223163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
Manifest number: 0B8B
Signing time: Fri 31 Jan 2025 17:00:07 +0000
Manifest this update: Fri 31 Jan 2025 17:00:07 +0000
Manifest next update: Sat 01 Feb 2025 17:00:07 +0000
Files and hashes: 1: bULP8YM0sv92sVrZRKipE16QVow.crl (hash: GOOumgpiuUTIBsR97U5fMBNrrVrSYXTmaQkkKlFjraY=)
2: nnbxQ8tDPz9a0vLR7ITFF8A_VlE.roa (hash: halDO4C/H1OfIMQSoqT7EneEPBECnw5N2tq5Tmmkcww=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:39:fc:bd:db:04:5a:d5:c4:ed:69:ee:22:31:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d42cff18334b2ff76b15ad944a8a9135e90568c
Validity
Not Before: Jan 31 17:00:07 2025 GMT
Not After : Feb 1 17:00:07 2025 GMT
Subject: CN=a48500828afdbace7f0ed587abbbd505d6fff578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:02:9d:47:d7:20:d0:da:ce:33:5a:b7:74:b9:
4c:14:0f:7f:25:9e:17:43:1a:68:ff:36:43:27:a4:
44:9a:56:01:22:18:c9:fd:1f:a6:6d:b4:8e:57:b3:
a5:fa:39:33:4b:fa:75:52:19:71:3c:39:3c:c9:db:
1c:51:ec:2f:e5:7c:55:26:d9:7f:58:83:37:a4:e8:
ba:cb:3e:a6:37:65:a3:73:5b:31:9e:27:db:4e:25:
e0:1d:ce:d6:f1:b7:dc:06:ab:09:6a:0a:59:56:2c:
b9:93:f8:da:f0:ba:5a:cd:00:5b:04:f8:c6:a3:49:
36:e1:5d:e0:87:27:4a:b2:d8:b5:09:d0:d1:0b:cd:
f9:9e:d9:0f:62:7f:ba:fe:ff:32:16:66:af:eb:f2:
d2:6a:83:71:de:a7:47:6d:92:7e:e4:cf:a2:8f:f4:
75:18:22:6f:2d:0f:34:42:5e:51:6f:5e:db:41:16:
9e:75:52:39:f0:e1:c3:ff:6d:b4:02:02:8c:1c:b7:
16:ef:44:79:d1:22:3e:23:89:e4:e3:05:f0:18:08:
c2:c3:6b:64:40:7e:48:bd:b4:e7:08:01:fe:5b:9d:
50:90:55:06:54:bd:0c:0e:a3:e8:08:13:d0:21:09:
3f:fa:79:f3:16:0b:4a:99:65:aa:98:bf:26:f3:1c:
b0:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:85:00:82:8A:FD:BA:CE:7F:0E:D5:87:AB:BB:D5:05:D6:FF:F5:78
X509v3 Authority Key Identifier:
keyid:6D:42:CF:F1:83:34:B2:FF:76:B1:5A:D9:44:A8:A9:13:5E:90:56:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bULP8YM0sv92sVrZRKipE16QVow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/60d930-bd46-4517-ab0e-a6ce8355b2e0/1/bULP8YM0sv92sVrZRKipE16QVow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5a:e8:22:be:81:fc:bc:03:81:f2:f4:d0:c0:e7:80:f0:56:
1b:7d:73:e3:c6:7c:02:a8:d5:e5:75:36:54:72:c5:60:e4:85:
03:5d:e1:8e:33:d4:c4:55:cf:d4:8c:cc:58:ad:21:46:e4:81:
0b:4b:40:6f:fd:30:1a:10:dc:d8:14:ed:28:44:28:89:8f:3b:
44:1a:88:46:0a:03:bc:dd:8b:24:39:20:f0:b3:a4:9e:3b:b2:
06:77:8a:c4:1a:a1:2e:68:38:16:fe:02:d9:b1:cb:ba:e4:de:
ee:42:8f:ef:25:15:6e:b0:ca:46:97:3e:e0:7a:8d:46:83:d1:
54:ef:b4:6a:df:96:37:a5:7d:a0:c6:4b:c3:f8:ee:88:4c:ba:
17:e8:c8:a9:cc:ea:5b:60:7e:a0:42:b0:10:f3:a9:79:72:8b:
ad:8e:95:57:01:98:e0:8d:1f:90:f3:96:d5:91:4a:ec:f4:15:
4b:c6:1f:5e:65:21:18:40:3d:2f:ab:94:bc:8c:40:61:70:c7:
37:d1:61:6b:1b:78:24:01:32:ec:28:f3:02:39:46:c3:82:b5:
9b:55:6d:ff:18:64:f2:76:57:71:ea:41:b6:b8:20:a0:d1:91:
cd:25:26:d8:9a:7e:d9:01:e9:f7:14:2e:e3:20:9e:b2:e1:8f:
4a:2d:4e:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:09 2025 by rpki-client